---
services:
  eidas-proxy:
    image: docker.sunet.se/eidas-proxy:<%= @version %>
    container_name: eidas-proxy
    environment:
      - PROXY_SERVICE_DOMAIN_PREFIX="https://<%= @service_name %>/eidas-ps"
      - SPRING_PROFILES_ACTIVE=<%= @country %>
      - CERTNAME="<%= server_fqdn %>_infra",
      - spring_config_param="<%= @connector_directory %>/<%= @country %>/cfg/"
      - PKCS11_PIN=<%= @pkcs11_pin %>
      - PROXY_SERVICE_COOKIEENCRYPTPW= <%= proxy_service_cookie_encrypt_pw %>

    hostname: <%= @server_fqdn %>

    volumes:
      - '/var/log/eidas-proxy:/var/log/eidas-proxy'
      - '<%= @proxy_directory %>:<%= @proxy_directory %>'
      - '/etc/luna/cert:/usr/safenet/lunaclient/cert'
      - '/etc/Chrystoki.conf.d:/etc/Chrystoki.conf.d'
      - '/dev/log:/dev/log'
      - '/etc/ssl:/etc/ssl'

    ports:
      - "443:8443"
      - "127.0.0.1:444:8444"